Skip to content
OpenAdvisories

Product · rthalley

dnspython

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-114605

    dnspython dns.name.from_wire_parser() excessive CPU use

    dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompressio…

    rthalley dnspython dnspython dnspython Debian Ubuntu PyPI